lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Thu, 17 Jan 2019 14:40:22 +1100 (AEDT)
From:   James Morris <jmorris@...ei.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
cc:     linux-kernel@...r.kernel.org, linux-security-module@...r.kernel.org
Subject: [GIT PULL] Security subsystem fixes for v5.0-rc3

Please pull these fixes for the security subsystem.

The first (by Casey actually) fixes a regression introduced with the LSM 
stacking changes.


The following changes since commit 7939f8beecf1cfb10d255be65bfbd3793fae82a1:

  Merge tag 'trace-v5.0-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace (2019-01-16 05:28:26 +1200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git fixes-v5.0-rc2

for you to fetch changes up to a5795fd38ee8194451ba3f281f075301a3696ce2:

  LSM: Check for NULL cred-security on free (2019-01-16 15:41:11 -0800)

----------------------------------------------------------------
James Morris (1):
      LSM: Check for NULL cred-security on free

Kees Cook (1):
      Yama: Check for pid death before checking ancestry

Tycho Andersen (1):
      seccomp: fix UAF in user-trap code

 kernel/seccomp.c         | 4 ++++
 security/security.c      | 7 +++++++
 security/yama/yama_lsm.c | 4 +++-
 3 files changed, 14 insertions(+), 1 deletion(-)


Powered by blists - more mailing lists